AWS VPC Networking Concepts Every Cert Candidate Must Master

What is this page about?

A guide to the AWS VPC networking concepts that recur across the certification exams (heavily on SAA-C03, SOA-C02, and SAP-C02, and about 40% of the Networking Specialty). It teaches the VPC mental model, subnets and route tables, the public-private distinction, internet vs NAT gateways, security groups vs network ACLs, gateway vs interface endpoints, peering, Transit Gateway and Cloud WAN, hybrid connectivity (VPN and Direct Connect), Route 53 Resolver, and the cross-account patterns that confuse candidates, with a two-week mastery plan.

What has been corrected on this page?

Every accepted correction to this page is recorded with the exact change, so readers can see how the page improved over time.

1. 11 July 2026 · corrected by Melik Can Sariyer

   4 flagged claims verified. 3 unverifiable named-company claims (Netflix/Capital One/Airbnb subnet scale, Coca-Cola NAT cost anecdote, Capital One endpoint migration) generalized to industry-pattern statements. The '$450/month savings' figure was CONFIRMED as correct arithmetic (10TB x $0.045/GB = $450 exactly, matching the article's own stated NAT rate) -- kept the number, softened only the 'representative benchmark' framing since it's an illustrative calculation, not a documented real-world case.

   Before

   'Companies like Netflix, Capital One, and Airbnb run hundreds of VPCs per AWS account...' / "Coca-Cola's cloud cost engineering team has publicly noted NAT Gateway charges as one of their top three AWS line items..." / 'Capital One has publicly described migrating from NAT Gateway to gateway endpoints for S3 access...' / 'A representative savings figure: a workload pulling 10 TB/month from S3 saves roughly $450 per month'

   After

   Large-scale AWS customers commonly run hundreds of VPCs per account and tens of thousands of subnets in aggregate (unattributed, generalized). / It is a common pattern for organizations to find NAT Gateway charges among their largest AWS networking line items in early VPC deployments (unattributed, generalized). / Organizations that migrate from NAT Gateway to gateway endpoints for S3 access commonly cite cost reduction and security improvement as the motivation (unattributed, generalized). / Kept the $450/month figure (verified correct arithmetic: 10TB x $0.045/GB) but reframed as 'an illustrative calculation, not a documented real-world case' rather than a 'representative benchmark'.

   Why: 3 unverifiable named-company claims (Netflix/Capital One/Airbnb subnet scale, Coca-Cola NAT cost anecdote, Capital One endpoint migration) were generalized to industry-pattern statements since none could be verified as real public statements. The $450/month savings figure was confirmed as correct arithmetic matching the article's own stated NAT rate, so the number was kept; only the framing was softened since it is an illustrative calculation, not a documented real-world case. Note: a separate, unrelated Capital One 'cloud onboarding curriculum' claim elsewhere in the article was noticed but left unchanged, out of scope for this correction.

   View the full record →

Who checked this page?

1 contributor has checked "AWS VPC Networking Concepts Every Cert Candidate Must Master" on Pass4Sure. Each name below links to that person's public CitePep profile, where every contribution they have made is listed with the exact change they proposed.